
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft
File: Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft (raw, json)
Hash identifier: pCTKswcneI9e9GRMHdnxsDJwWJionOCutvbXWguQW54=
Subject key identifier: 0B:62:83:CA:1F:63:F8:4B:80:4C:C9:37:5C:0B:4A:11:CE:E4:7A:77
Authority key identifier: 27:2D:71:AD:62:64:57:75:CC:DF:BB:57:70:47:8E:59:43:EA:65:95
Certificate issuer: /CN=A91D6DBD/serialNumber=272D71AD62645775CCDFBB5770478E5943EA6595
Certificate serial: 01C7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft
Manifest number: 01BC
Signing time: Mon 02 Mar 2026 01:15:11 +0000
Manifest this update: Mon 02 Mar 2026 01:15:09 +0000
Manifest next update: Mon 09 Mar 2026 01:15:09 +0000
Files and hashes: 1: Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl (hash: 4+aDmkjdGtuuO0V/UsH5iZcjLona5Is5vp6Sr7ROxVc=)
2: 2ADA37E6790F11EE99D7CB43C4F9AE02.roa (hash: pqtd8MX3dITy7jT8/t2X+fe/gtajFTpoC5L5QkHATH4=)
3: 72F76026790A11EE88F94A29C4F9AE02.roa (hash: We3atJEneJvpfEkFe24Lzcs6jwHtdo/dyS5y6FQoVH8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl
rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:15:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 455 (0x1c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6DBD, serialNumber=272D71AD62645775CCDFBB5770478E5943EA6595
Validity
Not Before: Mar 2 01:15:09 2026 GMT
Not After : Mar 9 01:15:09 2026 GMT
Subject: CN=69a4e49f-793d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ae:1e:9c:c2:d2:00:52:47:21:1e:f4:96:04:
e1:35:ed:ff:ac:d1:03:29:ed:9b:dc:09:6f:fc:47:
20:44:c4:c9:04:bd:31:c9:7d:34:b6:c7:03:5b:29:
34:0d:90:5d:1c:0d:04:fa:05:88:de:02:01:7a:09:
30:cd:01:29:8b:33:25:4b:f0:56:48:7d:97:89:7a:
cc:9a:39:09:46:b3:28:84:23:20:fc:01:d6:e2:4c:
b6:27:60:88:cd:65:86:ff:f1:fb:f5:70:a8:17:ed:
11:4d:9e:a3:38:14:11:88:d8:4a:9e:17:aa:67:9b:
8a:50:c0:1c:01:32:42:6f:1d:4a:dd:99:da:40:3c:
6b:a0:21:5c:07:7d:2e:3d:35:f3:0c:d3:f2:b3:ba:
98:ba:f8:9b:63:80:d1:21:c3:57:9b:23:6e:92:d6:
81:69:ce:28:a2:87:f4:80:10:51:7c:b5:2b:3c:86:
74:3a:84:39:1a:09:04:d5:6a:b6:72:a3:c4:31:b8:
02:34:55:0d:7d:d0:88:84:f8:8e:71:dc:24:96:d9:
30:a2:e3:cd:96:00:50:6c:5e:15:23:85:85:09:b8:
81:57:52:d7:f6:4d:93:35:63:9e:6a:6b:2d:11:f3:
16:78:d5:e0:01:3b:b5:a0:3a:9f:27:d9:3a:3b:0b:
d0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:62:83:CA:1F:63:F8:4B:80:4C:C9:37:5C:0B:4A:11:CE:E4:7A:77
X509v3 Authority Key Identifier:
keyid:27:2D:71:AD:62:64:57:75:CC:DF:BB:57:70:47:8E:59:43:EA:65:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:80:ab:55:4c:6b:b8:be:bb:f9:ba:43:a0:3a:18:1b:d3:43:
bf:51:0f:82:1c:10:f1:da:50:66:93:05:6b:a3:f3:ec:cc:54:
09:c0:8d:67:1a:00:1d:b0:fe:cc:9a:31:f0:c8:6d:7c:e5:3f:
e1:2d:9f:47:08:61:71:69:dc:83:ae:78:c7:a2:84:55:d7:55:
e0:0b:46:ab:0c:79:73:e4:2b:ce:de:f8:38:f3:c6:ef:e0:64:
48:18:da:3e:bd:07:79:a4:36:bf:59:e0:50:7b:bc:f4:a3:29:
5c:b7:53:f4:37:8e:26:c1:db:2e:5b:e8:02:e4:3b:b3:41:bd:
cc:a1:0f:66:58:80:7d:4a:bb:ed:02:ef:c1:f6:0d:00:9e:ab:
d5:4e:93:cb:37:70:6e:08:3f:89:28:17:8d:73:a3:3e:31:7c:
ea:f9:47:b7:b4:7b:84:15:21:08:66:a9:7a:ec:97:04:78:1f:
82:b9:8e:71:a6:c8:96:79:96:96:c2:e8:c8:71:f7:4f:37:92:
2f:4b:30:02:3c:57:a9:5d:1d:2a:6d:b3:12:92:12:37:6b:b1:
14:ce:f4:1c:ab:23:8c:39:d3:15:9c:73:1a:1b:81:d6:08:60:
b3:5b:97:d5:41:e9:ed:32:92:5c:95:36:74:d9:bd:63:74:36:
b2:24:b8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:15 2026 by rpki-client